关闭

关闭

关闭

封号提示

内容

首页 DNS server working principle attack base(DNS服务器…

DNS server working principle attack base(DNS服务器工作原理攻击基础).doc

DNS server working principle at…

上传者: 刘叶鸣 2017-10-13 评分 0 0 0 0 0 0 暂无简介 简介 举报

简介:本文档为《DNS server working principle attack base(DNS服务器工作原理攻击基础)doc》,可适用于领域,主题内容包含DNSserverworkingprincipleattackbase(DNS服务器工作原理攻击基础)DNSserverworkingprincip符等。

DNSserverworkingprincipleattackbase(DNS服务器工作原理攻击基础)DNSserverworkingprincipleattackbase(DNS服务器工作原理攻击基础)NSisdividedintoClientandServer,andClientplaystheroleofaskingquestions,thatis,askingServeraDomainName,andServerhastoanswertherealIPaddressofthisDomainNameHowdoesDNSmakenameresolutionHowdoesDNSworkDNSisdividedintoClientandServer,andClientplaystheroleofaskingquestions,thatis,askingServeraDomainName,andServermustanswerthisDomainTrueIPaddressofNameThelocalDNSwillcheckitsdatabasefirstIfyourdatabaseisnotavailable,youwillasktheDNSontheDNSfortheanswerandsavetheanswerandanswerthecustomerTheDNSserverrecordsthenamedataofthedomainunderthedifferentauthorizationzone(Zone),whichincludesthesubdomainnameandhostnameunderthedomainIneachnameserverhasacachebuffer(Cache),thecachecacheisthemainpurposeofthenamethenameserverandcheckouttherelativeIPaddressrecordedinthecachebuffer,sothatthenexttimethereisanotherclienttotheservertoquerywhenthesamenameisnotintheservertohostdon'tgolookingfor,andyoucanfindthepennamerecordsdatafromthecache,returnedtotheclient,theclienttoacceleratequeryspeedSuchas:WhentheDNSclientqueriesaspecifiedDNSserverforahostnameontheInternet,theDNSserversearchesforthenamespecifiedbytheuserinthatdatabaseIfnot,theserverwillbeintheirowncachethequerycacheintherecord,ifyoufindthepennamerecords,fromtheDNSserverdirectlycorrespondstotheIPaddressbacktotheclient,ifthenameserverinthedatarecordisnotfoundandcachecachesinnowhentheserverfirstnametotheservertoquerytheothernamewillSuchas:TheDNSclienttotheDNSserverspecifiedqueriesontheInternethostname,whenthenameoftheDNSserverinthedatarecordcannotfindtheuserspecified,willturntotheservercachecachetoseeifthedata,whenthecachecachealsocannotfindtheclosesttoTohelpfindthenameserverIPaddressOnanotherserver,alsohavethesameactionquery,whenwillreverttotheoriginalquerytothequeryserver,theDNSservertoanotherDNSserverqueryresultsafterreceivingthefirstquerytothehostnameandIPaddressrecordedinthecorrespondingcachecachesThelastreplytotheclientinthequeryresultsExampleWeillustrate,supposewewanttoqueryanameontheInternetiswwwtestcomcn,thenweknowthatthehostnameinChinaCN,butalsotofindthenameoftheorganizationtestcomcnthisdomainoftheWWWhost,eachstepbelowthenameresolutionprocess"Step"typetheinstructionsofthequeryhostintheDNSclient(Reslover),suchas:C:pingwwwtestcomcnPingingwwwtestcomcnwith,bytes,of,dataReply,from,,bytes,time,<ms,TTL,"Step""anddesignatedDNSservertocheckwhetherbelongstothedomainofthehostname,findoutifthechangedoesnotbelongtothedomainnamehostrange,beforequerycachingzonerecords,checkwhetherthismachine"Step"query,foundthatthecachedoesnothavethisrecorddata,willgetoneoftherootdomainofaserver,issuedtosayRequesttofindwwwtestcomcn"Step"asksRootNameServerintherootdomain,andRootNameServerrecordseachTopDomainisresponsibleforwhatDNSServer,sohewillrespondtothenearestNameServerastheDNSservohostforcontrollingtheCNdomain"Step"RootNameServerhastoldLocalDNSServerwhichNameServerisresponsibleforCn,Domain,andthenLocalDNSsendsthenamewwwtestcomcnagaintofindtheRequest"Step"""intheCndomain,thedesignatedDNSserverhasnotfoundtherecordofthisnameonthismachine,soitwillrespondtotheDNSserverthatoriginallysentthequeryandsay,"whereisthenearestserver"HewillrespondtothelatesthostDNSservohostforcontrollingthecomcndomain"Step"wasoriginallyqueriedbytheDNSserverhost,andafterreceivingtheIPlocationofthequerycontinues,theDNStothedomainofthecomcnwillbeaddedServersendsasearchforthewwwtestcomcnnamesearch"Step"inthedomainofcomcn,thespecifiedDNSServerdoesnotfindarecordofthisnameonthismachine,soitrepliestothequeryrequestDNSServertellshimwherethenearestserverisHerespondstotheDNShostnearesttothedomainthatcontrolsthetestcomcn"Step"originallyqueriedDNSServer,inreceivingthelocationthatshouldcontinuetoquery,intheDNStothetestcomcndomainServersendsasearchforwwwtestcomcnrequirements,andendsupinthetestcomcndomainofDNSServerfindsthewwwtestcomcnforthishostIPStep,sotheDNSserverthatoriginallysentthequeryandthenreceivedtheIPlocationofthequeryresultsrespondedtotheDNSclientoftheoriginalquerynameTworeallyDNSquerypatternsTherearetwokindsofinquiryprinciple,dividedintotwokindsofRecursiveandInteractiveTheformerisaskedbytheDNSagentThemethodisInteractive,andthelatterismadebyInteractivedirectlyWecanseefromtheaboveexample,thegeneralnameofthequeryprocess,actuallythetwoquerymodesareinteractivethereRecursive(Recursive):DNSclienttoDNSServerquerymode,thiswayistocheckthepackettosendouttherighttoask,waitingforaresponsefromthecorrectname,theonlyresponsebackwhetherthepacketiscorrectorthattheresponseistofindthenameoftheerrormessage(Interactive)querypatternsbetween:DNSandServerbyClientorDNSServersenttoaskthewaytosendpacketsouttheresponsedatabacktoask,isnotnecessarilythelastnameofthecorrectposition,buttheresponseisnotreturnedasmentionedaboveistheerrormessage,hisresponsetocomebackandtellyoutheclosestIPlocation,nameandthentothenearestIPlookuptotheanalysisoftherepeatedactionuntilyoufindthecorrectposition

用户评论(0)

0/200

精彩专题

上传我的资料

每篇奖励 +2积分

资料评价:

/5
0下载券 下载 加入VIP, 送下载券

意见
反馈

立即扫码关注

爱问共享资料微信公众号

返回
顶部